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IN THE CLAIMS: 

Please re-write the claims as follows: 

Please cancel Claims 6-29 without prejudice. 



1 1 . (Currently Amended) A method for establishing identity in a file system, 

2 distributing and caching metadata related to files maintained in a file system, 

3 comprising the steps of : 

4 receiving a file request concerning an indicated file from a client, the request re- 

5 ceived by a proxy; 

6 forwarding the request from the proxy to a file server; 

7 returning a reply associated with the file request from the file server to the proxy; 

8 inserting, by the proxy, metadata into the file handle; and 

9 sending, by the proxy, the file handle with the metadata inserted in the file handle 

10 to the client, the metadata to be used in further requests to identify the client and the indi- 
n cated file . 

12 exchanging any of files, objects, and file, object related information between a 

13 file server and a client via an intermediary device; and 

14 using file handles to convey the cached metadata for use by said intermediary de 

15 vice and said client . 

l 2. (Currently Amended) The method of Claim 1, further comprising the step of : 
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2 using said the metadata in said the file handles for any of eliminating a need for 

3 said the proxy intermediary device to generate additional requests to said the_server to 

4 establish file identity, and for completing client requests. 

1 3. (Currently Amended) The method of Claim 1, further comprising the step of : 

2 using said intermediary device to encode 

3 encoding metadata in the a form of a session key into said the file handle , the session key 

4 expiring that expires after a predetermined amount of time. 

1 4. (Currently Amended) The method of Claim 1, further comprising: 

2 wherein said file system is 

3 using an NFS file system as the file system . 

1 5. (Currently Amended) The method of Claim 1, further comprising: 

2 wherein said file system uses 

3 using a stateless protocol by the file system . 



6-29 (Cancelled) 
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Please add new claims 30, et seq. as follows: 

1 30. (New) The method of claim 1, further comprising: 

2 sending another file request by the client to the server; 

3 including the metadata in a further file handle sent with the another request; 

4 receiving the another request by the proxy; 

5 identifying, in response to the metadata, the client as permitted to submit the an- 

6 other file request; 

7 sending the another request to the file server and not sending the metadata with 

8 the another file handle to the file server; and 

9 receiving by the proxy the further reply from the file server, and sending by the 

10 proxy the further reply to the client. 

1 31. (New) A method for establishing identity in a file system, comprising: 

2 receiving a first file request concerning an indicated file from a client, the first file 

3 request received by a proxy; 

4 forwarding the first file request from the proxy to a file server; 

5 returning a reply associated with the first file request from the file server to the 

6 proxy; 

7 inserting, by the proxy, metadata into the file handle; 
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8 sending, by the proxy, the file handle with the metadata inserted in the file handle 

9 to the client, the metadata to be used in further requests to identify the client and the indi- 

10 cated file; 

n sending a second file request by the client to the server; 

12 including the metadata in a second file handle sent with the second file request; 

13 receiving the second file request by the proxy; 

14 identifying, in response to the metadata, that the client as permitted to submit the 

15 second file request; 

16 sending the second file request to the file server and not sending the metadata 
n with the second file handle to the file server; and 

is receiving by the proxy a second reply from the file server, and sending by the 

19 proxy the second reply to the client. 

1 32. (New) An apparatus to establish identity in a file system, comprising: 

2 a proxy to receive a file request sent by a client to a file system, the proxy to for- 

3 ward the request to a file server; 

4 the file server to return a reply associated with the file request to the proxy; 

5 the proxy to insert metadata into the file handle; and 

6 the proxy to send the file handle with the metadata inserted in the file handle to 

7 the client, the metadata to be used in further requests to identify the client and the indi- 

8 cated file. 



5 



PATENTS 
112056-0474 
P01-2475.01 

1 33. (New) The apparatus as in claim 32, further comprising: 

2 the client to send another file request to the server, the client to include the meta- 

3 data in a further file handle sent with the another request; 

4 the proxy to receive the another request, the proxy to identify, in response to the 

5 metadata, the client as permitted to submit the another file request, and the proxy to send 

6 the another request to the file server and not to send the metadata with the another file 

7 handle to the file server; and 

8 the proxy to receive a further reply from the file server, and the proxy to send the 

9 further reply to the client. 

1 34. (New) The apparatus of Claim 32, further comprising: 

2 the proxy to use the metadata in the file handle received from the client to elimi- 

3 nate a need for additional communication with the file server to establish file identity. 

1 35. (New) The apparatus of Claim 32, further comprising: 

2 the proxy to encode the metadata in a form of a session key into the file handle, 

3 the session key expiring after a predetermined amount of time. 

1 36. (New) The apparatus of Claim 32, further comprising: 

2 an NFS file system used as the file system. 

l 37. (New) The apparatus of Claim 32, further comprising: 
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2 a stateless protocol used by the file system. 

1 38. (New) A computer readable media, comprising: 

2 said computer readable media containing instructions for execution on a processor 

3 for a method of establishing identity in a file system, the method having, 

4 receiving a file request concerning an indicated file from a client, the request re- 

5 ceived by a proxy; 

6 forwarding the request from the proxy to a file server; 

7 returning a reply associated with the file request from the file server to the proxy; 

8 inserting, by the proxy, metadata into the file handle; and 

9 sending, by the proxy, the file handle with the metadata inserted in the file handle 

10 to the client, the metadata to be used in further requests to identify the client and the indi- 
n catedfile. 

1 39. (New) A method for establishing identity in a file system, comprising: 

2 receiving a first file request concerning an indicated file from a client, the first file 

3 request received by a proxy; 

4 forwarding the first file request from the proxy to a file server; 

5 permitting the request to be acted upon by the file system in response to a prede- 

6 termined protocol; 

7 returning a reply associated with the first file request from the file server to the 

8 proxy; 
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9 inserting, by the proxy, a session key into the file handle; and 

10 sending, by the proxy, the file handle with the session key inserted in the file han- 
n die to the client, the session key to be used in further requests to identify the client and 

12 the indicated file; 

1 40. (New) The method according to claim 39, further comprising: 

2 sending a second file request by the client to the server; 

3 including the session key in a second file handle sent with the second file request; 

4 receiving the second file request by the proxy; 

5 identifying, in response to the session key, that the client as permitted to submit 

6 the second file request; 

7 sending the second file request to the file server and not sending the session key 

8 with the second file handle to the file server; and 

9 receiving by the proxy a second reply from the file server, and sending by the 

10 proxy the second reply to the client. 

1 41. (New) The method according to claim 39, further comprising: 

2 causing the session key to expire after a selected amount of time. 

1 42. (New) The method according to claim 39, further comprising: 

2 causing the session key to expire after a selected amount of usage. 
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1 43. (New) The method according to claim 39, further comprising: 

2 using a NFS protocol as the predetermined protocol. 

1 44. (New) The method according to claim 39, further comprising: 

2 using as the predetermined protocol a two way communication exchange between 

3 the proxy and the file server. 

1 45. (New) An apparatus to establish identity in a file system, comprising: 

2 a proxy to receive a file request sent by a client to a file system, the proxy to for- 

3 ward the request to a file server; 

4 the file server to return a reply associated with the file request to the proxy; 

5 the proxy to insert a session key into the file handle; and 

6 the proxy to send the file handle with the session key inserted in the file handle to 

7 the client, the session key to be used in further requests to identify the client and the indi- 

8 cated file. 

1 46. (New) The apparatus as in claim 45, further comprising: 

2 the client to send another file request to the server, the client to include the session 

3 key in a further file handle sent with the another request; 

4 the proxy to receive the another request, the proxy to identify, in response to the 

5 metadata, the client as permitted to submit the another file request, and the proxy to send 
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the another request to the file server and not to send the session key with the another file 
handle to the file server; and 

the proxy to receive a further reply from the file server, and the proxy to send the 
further reply to the client. 

47. (New) The apparatus of Claim 45, further comprising: 

the proxy to use the metadata in the file handle received from the client to elimi- 
nate a need for additional communication with the file server to establish file identity. 

48. (New) The apparatus of Claim 45, further comprising: 

the proxy to encode the metadata in a form of a session key into the file handle, 
the session key expiring after a predetermined amount of time. 

49. (New) The apparatus of Claim 45, further comprising: 

an NFS file system used as the file system. 

50. (New) The apparatus of Claim 45, further comprising: 

a stateless protocol used by the file system. 

51. (New) An apparatus to establish identity in a file system, comprising: 

a proxy to receive a first file request sent by a client to a file system, the proxy to 
forward the first file request to a file server; 
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4 the file server to return a reply associated with the first file request to the proxy; 

5 the proxy to insert a session key into a file handle; 

6 the proxy to send the file handle with the session key inserted in the file handle to 

7 the client, the session key to be used in a second file request to identify the client and the 

8 indicated file; 

9 the client to send a second file request to the server, the client to include the ses- 

10 sion key in a second file handle sent with the second file request; 

n the proxy to receive the second file request, and the proxy to identify, in response 

12 to the session key, the client as permitted to submit the second file request, and the proxy 

13 to send the second file request to the file server and not to send the session key with the 

14 second file handle to the file server; and 

15 the proxy to receive a second reply from the file server, and the proxy to send the 

16 second reply to the client. 

1 52. (New) A method for establishing identity in a file system, comprising: 

2 receiving a first file request concerning an indicated file from a client, the first file 

3 request received by a proxy; 

4 forwarding the first file request from the proxy to a file server; 

5 permitting the request to be acted upon by the file system in response to a prede- 

6 termined protocol; 

7 returning a reply associated with the first file request from the file server to the 

8 proxy; 
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inserting, by the proxy, a cryptographic information into the file handle; 

sending, by the proxy, the file handle with the cryptographic information inserted 
in the file handle to the client, the cryptographic information to be used in further re- 
quests to identify the client and the indicated file. 

53. (New) The method according to claim 52, further comprising: 

sending a second file request by the client to the server; 

including the cryptographic information in a second file handle sent with the sec- 
ond file request; 

receiving the second file request by the proxy; 

identifying, in response to the cryptographic information, that the client as permit- 
ted to submit the second file request; 

sending the second file request to the file server and not sending the cryptographic 
information with the second file handle to the file server; and 

receiving by the proxy a second reply from the file server, and sending by the 
proxy the second reply to the client. 

54. (New) The method according to claim 52, further comprising: 

causing the cryptographic information to expire after a selected amount of time. 

55. (New) The method according to claim 52, further comprising: 

causing the cryptographic information to expire after a selected amount of usage. 
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56. (New) The method according to claim 52, further comprising: 

using a NFS protocol as the predetermined protocol. 

57. (New) The method according to claim 52, further comprising: 

using as the predetermined protocol a two way communication exchange between 
the proxy and the file server. 

58. (New) An apparatus to establish identity in a file system, comprising: 

a proxy to receive a file request sent by a client to a file system, the proxy to for- 
ward the request to a file server; 

the file server to return a reply associated with the file request to the proxy; 

the proxy to insert a cryptographic information into the file handle; and 

the proxy to send the file handle with the cryptographic information inserted in 
the file handle to the client, the cryptographic information to be used in further requests 
to identify the client and the indicated file. 

59. (New) The apparatus as in claim 58, further comprising: 

the client to send another file request to the server, the client to include the cryp- 
tographic information in a further file handle sent with the another request; 

the proxy to receive the another request, the proxy to identify, in response to the 
metadata, the client as permitted to submit the another file request, and the proxy to send 
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the another request to the file server and not to send the cryptographic information with 
the another file handle to the file server; and 

the proxy to receive a further reply from the file server, and the proxy to send the 
further reply to the client. 

60. (New) The apparatus of Claim 58, further comprising: 

the proxy to use the metadata in the file handle received from the client to elimi- 
nate a need for additional communication with the file server to establish file identity. 

61. (New) The apparatus of Claim 58, further comprising: 

the proxy to encode the metadata in a form of a cryptographic information into the 
file handle, the cryptographic information expiring after a predetermined amount of time. 

62. (New) The apparatus of Claim 58, further comprising: 

an NFS file system used as the file system. 

63. (New) The apparatus of Claim 58, further comprising: 

a stateless protocol used by the file system. 

64. (New) An apparatus to establish identity in a file system, comprising: 

a proxy to receive a first file request sent by a client to a file system, the proxy to 
forward the first file request to a file server; 
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the file server to return a reply associated with the first file request to the proxy; 

the proxy to insert a cryptographic information into a file handle; 

the proxy to send the file handle with the cryptographic information inserted in 
the file handle to the client, the cryptographic information to be used in a second file re- 
quest to identify the client and the indicated file; 

the client to send a second file request to the server, the client to include the cryp- 
tographic information in a second file handle sent with the second file request; 

the proxy to receive the second file request, and the proxy to identify, in response 
to the cryptographic information, the client as permitted to submit the second file request, 
and the proxy to send the second file request to the file server and not to send the crypto- 
graphic information with the second file handle to the file server; and 

the proxy to receive a second reply from the file server, and the proxy to send the 
second reply to the client. 
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